4 ms·
"Use of a key derivation that employs a salt makes this attack infeasible." https://en.wikipedia.org/wiki/Rainbow_table https://en.wikipedia.org/wiki/Rainbow_ta
by growt 5y ago
"Use of a key derivation that employs a salt makes this attack infeasible."
https://en.wikipedia.org/wiki/Rainbow_table https://en.wikipedia.org/wiki/Rainbow_table
"Salts defend against attacks that use precomputed tables (e.g. rainbow tables)"
https://en.wikipedia.org/wiki/Salt_(cryptography) https://en.wikipedia.org/wiki/Salt_(cryptography)
- tyingq 5y agoSalts do nothing for people with predictable passwords though. The salt is in the dump, so I can hash known plaintext with the algorithm and the dumped data. Even if I can only hash a million a day, if your password is one of the top million most popular, and I have a good list, I'll have your password in a day. And if you re-used it... Salts do make naïve brute-force, all-possible-strings approaches useless, yes.
- growt 5y agoYes, but nothing will make predictable passwords safe (at least when you have the hash). Enforcing password guidelines helps a bit.